ansible-sshd/CHANGELOG.md
Rich Megginson b1ec052b39 docs(changelog): version v0.19.0
changelog for release v0.19.0
2023-04-27 19:11:51 -06:00

13 KiB

Changelog

[v0.19.0] - 2023-04-27

New Features

  • feat: add support for FreeBSD, OpenBSD

Bug Fixes

  • none

Other Changes

  • test: skip selinux or firewall role test where not supported
  • test: check generated files for ansible_managed, fingerprint
  • ci: Add commitlint GitHub action to ensure conventional commits
  • ci: Drop testing on Debian stretch (9)
  • ci: add dependabot check for github action updates
  • style: ansible-lint - align with current Ansible recommendations

[v0.18.2] - 2023-04-06

New Features

  • none

Bug Fixes

  • Fedora 38 has no longer non-standard hostkey permissions

Other Changes

  • Fingerprint ansible-sshd managed config files

[v0.18.1] - 2023-01-17

New Features

  • Add support for Alpine OS (#212)
  • Add support for managing selinux and firewall on RHEL-based systems (#211)

Bug Fixes

  • Update tests to not use configuration options available in system defaults (#213)
  • Improve manual pages processing in tests to accommodate Alpine's busybox man (#213)

Other Changes

  • Add a Github action to check for non-inclusive language (#215)

[v0.18.0] - 2022-09-27

New Features

  • Adding support for OpenWrt 21.03

  • Add final version of RequiredRSASize

Keep the old version for backward compatibility

Upstream commit: https://github.com/openssh/openssh-portable/commit/1875042c

Bug Fixes

  • Update source template to match generated files

Other Changes

  • Remove legacy files

  • Update pre-commit plugins to latest

  • Linting fixes

  • keep v prefix in version/tag

Keep the v prefix in the version/tag

[v0.17.0] - 2022-08-31

New Features

  • Make drop-in config file functionality configurable by user

This PR simplifies the logic behind the drop-in config files and also allows the user to use drop-in configs even if the distribution does not support it out of the box.

Bug Fixes

  • Allow user to override variables

A previous commit hardcoded many variables to the values under vars/, making it impossible for the user to parameterize things like the systemd service name. The assumption was that the _sshd* variables were useless in an effort to blindly adhere to best practices, but they were crucial in allowing flexibility to the user.

Other Changes

  • none

[v0.16.1] - 2022-07-28

New Features

  • add parameter RSAMinSize

Add support for the new RSAMinSize parameter.

Bug Fixes

  • Ensure values are cast to correct type

https://github.com/willshersystems/ansible-sshd/issues/188 This shouldn't be necessary, but there seems no way to guarantee using a version of Jinja which doesn't have this problem.

In addition - it is not good practice to compare values to true or false - instead, just ensure the value is a bool type and evaluate in a boolean context.

Other Changes

  • Addition notes about secondary variables
  • Fix various linting issues
  • Revert incorrect module name
  • tests: Do not be picky about spaces/tabs

When testing with cloud-init, it modifies the sshd_configuration and can replace some tabs with whitespaces. This happens frequently around the subsystem keyword. There are no functional changes, but the matching did not work as expected.

Signed-off-by: Jakub Jelen jjelen@redhat.com

  • the role still supports ansible 2.9

  • Add CHANGELOG.md

  • Add changelog_to_tag.yml to .github/workflows

Description: When a new changelog section is added to CHANGELOG.md and pushed, changelog_to_tag.yml is triggered, which generates a new tag and a new release.

[v0.15.1] - 2022-06-02

New Features

  • none

Bug Fixes

  • Remove kvm from virtualization platforms

Other Changes

  • none

[v0.15.0] - 2022-05-10

New Features

  • Unbreak FIPS detection and stabilize failing tests and GH actions
  • Make sure Include is in the main configuration file when drop-in directory is used
  • Make the role FIPS-aware

Bug Fixes

  • Fix runtime directory check condition
  • README: fix meta/make_option_lists link

Other Changes

  • none

[v0.14.1] - 2021-09-23

New Features

  • none

Bug Fixes

  • Use {{ ansible_managed | comment }} to fix multi-line ansible_managed

Other Changes

  • none

[v0.14.0] - 2021-08-18

New Features

  • Drop support for Ansible 2.8 by bumping the Ansible version to 2.9

Bug Fixes

  • none

Other Changes

  • none

[v0.13.2] - 2021-08-18

New Features

  • Add Debian 11 bullseye support

Bug Fixes

  • Fix wrong template file

Other Changes

  • Remove travis configuration and update readme with new badges
  • Add CentOS 6 to CI

[v0.13.1] - 2021-08-03

New Features

  • Add support for RHEL 9 and adjust tests for it

Bug Fixes

  • none

Other Changes

  • none

[v0.13.0] - 2021-06-12

New Features

  • Add configuration options from OpenSSH 8.6p1
  • Rename sshd_namespace_append to sshd_config_namespace
  • Support for appending a snippet to configuration file
  • Update meta data and README
  • use state: absent instead of state: missing
  • FreeBSD
  • UsePrivilegeSeparation is deprecated since 2017/OpenSSH 7.5 - https://www.openssh.com/txt/release-7.5
  • examples: Provide simple example playbook

Bug Fixes

  • Fix variable precedence when invoked through legacy "roles:"
  • Fix issues found by linters - enable all tests on all repos - remove suppressions
  • README: Document missing exported variable

Other Changes

  • Improve test coverage with new test cases and new distros, fixing minor issues on the way

[v0.12.0] - 2020-11-16

New Features

  • none

Bug Fixes

  • none

Other Changes

  • Run tests with Github Actions and fix things on the way

[v0.11.1] - 2020-10-28

New Features

  • none

Bug Fixes

  • none

Other Changes

  • Rename tests to follow best practices and make galaxy linters happy

[v0.11.0] - 2020-10-15

New Features

  • Implement more natural match blocks and test them
  • Support /etc/sysconfig/sshd to override crypto policies and handle more advanced use cases

Bug Fixes

  • README: Fix missing code block termination
  • subsystem appears to be ignored

Other Changes

  • none

[v0.10.2] - 2020-09-24

New Features

  • none

Bug Fixes

  • Remove extra blank line
  • Disable broken ansible-lint-actions
  • Cleanup lint issues, update documentation, fix typos

Other Changes

  • Implement more coherence check tests

[v0.10.1] - 2020-09-23

New Features

  • Use ansible_distribution_major_version in variables
  • Create CODE_OF_CONDUCT.md

Bug Fixes

  • none

Other Changes

  • none

[v0.10.0] - 2020-09-18

New Features

  • Minimum version is now Ansible 2.8
  • exit_host on ansible >= 2.8
  • OpenBSD and ansible_distribution_major_version

Bug Fixes

  • none

Other Changes

  • none

[v0.9.1] - 2020-09-18

New Features

  • none

Bug Fixes

  • none

Other Changes

  • Ubuntu focal, CI updates, code quality improvements

[v0.9.0] - 2020-09-18

New Features

  • Add new options from OpenSSH 8.3p1 including CASignatureAlgorithms

Bug Fixes

  • none

Other Changes

  • none

[v0.8.2] - 2020-03-17

New Features

  • Add Gentoo support with secure sshd defaults

Bug Fixes

  • none

Other Changes

  • none

[v0.8.1] - 2019-11-19

New Features

  • add debian 10 buster support
  • Add vars for openSUSE Leap 15 and CentOS 8

Bug Fixes

  • none

Other Changes

  • none

[v0.8.0] - 2019-07-10

New Features

  • Remove duplicate GatewayPorts
  • AIX support including new AIX handler
  • Updates syntax to Ansible 2.7 era

Bug Fixes

  • none

Other Changes

  • none

[v0.7.6] - 2019-05-23

New Features

  • none

Bug Fixes

  • Travis fixes
  • Resolve lint errors

Other Changes

  • none

[v0.7.5] - 2019-04-29

New Features

  • Remove 'UsePrivilegeSeparation' from Fedora defaults
  • Backup of sshd_config dependent on variable

Bug Fixes

  • none

Other Changes

  • none

[v0.7.4] - 2019-03-03

New Features

  • none

Bug Fixes

  • Fix variable loading.

Other Changes

  • none

[v0.7.3] - 2019-02-20

New Features

  • Make role work with chroot connections on EL 7.

Bug Fixes

  • Remove deprecated options

Other Changes

  • none

[v0.7.2] - 2018-09-11

New Features

  • none

Bug Fixes

  • Fixes bad option in systemd service file

Other Changes

  • none

[v0.7.1] - 2018-09-08

New Features

  • Adds on/off toggle

Bug Fixes

  • none

Other Changes

  • none

[v0.7.0] - 2018-09-07

New Features

  • Adds ability to install a systemd service
  • Add Ubuntu_18.yml
  • Add missing options
  • expose sshd_config template backup option with sshd_backup variable

Bug Fixes

  • none

Other Changes

  • none

[v0.6.2] - 2018-06-16

New Features

  • Add CoreOS support

Bug Fixes

  • none

Other Changes

  • none

[v0.6.1] - 2018-06-05

New Features

  • none

Bug Fixes

  • Amazon var name should be sshd_defaults

Other Changes

  • none

[v0.6.0] - 2018-04-24

New Features

  • Remove Deprecated options in default SSH config
  • Add StreamLocalBindUnlink option
  • Makes handler use listen: option
  • Removes tags
  • change ansible_pkg_mgr for package

Bug Fixes

  • Fix for ansible_virtualization_type not being defined in Ansible > 2.5
  • Fix Arch Linux var file

Other Changes

  • none

[v0.5.1] - 2017-06-24

New Features

  • Add Debian 9 stretch vars

Bug Fixes

  • none

Other Changes

  • none

[v0.5.0] - 2017-05-04

New Features

  • Add note about UsePAM on RHEL 7

Bug Fixes

  • Ansible23 fixes
  • Remove circular symlink in tests dir

Other Changes

  • none

[v0.4.10] - 2017-04-07

New Features

  • none

Bug Fixes

  • Fixed sshd_match blocks

Other Changes

  • none

[v0.4.9] - 2017-03-20

New Features

  • none

Bug Fixes

  • Fix sshd service state

Other Changes

  • none

[v0.4.8] - 2017-02-11

New Features

  • clean Archlinux support to match the current package openssh-7.4p1-2
  • vars: SUSE: Add default variables for SUSE based distributions

Bug Fixes

  • none

Other Changes

  • none

[v0.4.7] - 2016-12-26

New Features

  • Don't fail without package manager

Bug Fixes

  • none

Other Changes

  • none

[v0.4.6] - 2016-10-20

New Features

  • Support for OpenBSD

Bug Fixes

  • none

Other Changes

  • none

[v0.4.5] - 2016-08-03

New Features

  • show xenial support on galaxy

Bug Fixes

  • none

Other Changes

  • none

[v0.4.4] - 2016-04-16

New Features

  • Added ubuntu 16.04 config

Bug Fixes

  • none

Other Changes

  • none

[v0.4.3] - 2016-03-09

New Features

  • none

Bug Fixes

  • fix deprecation warning for sshd_packages

Other Changes

  • Housekeeping

[v0.4.2] - 2016-01-24

New Features

  • none

Bug Fixes

  • Fix for CentOS 6 l_value issue
  • Update example so not to break old SSH versions and add a warning

Other Changes

  • none

[v0.4.1] - 2016-01-11

New Features

  • Fedora HostKey(s)

Bug Fixes

  • none

Other Changes

  • none

[v0.4.0] - 2015-08-25

New Features

  • none

Bug Fixes

  • Do not manage /var/run/sshd on CentOS7 fixes #27

Other Changes

  • none

[v0.3.2] - 2015-07-23

New Features

  • DebianBanner support

Bug Fixes

  • none

Other Changes

  • none

[v0.3.1] - 2015-06-28

New Features

  • Verify SSHd config early
  • Add Fedora support
  • fix type in AcceptEnv for RedHat7

Bug Fixes

  • Fix issues - not reloading with default sshd_allow_reload value

Other Changes

  • none

[v0.3.0] - 2015-06-25

New Features

  • Make the role more container friendly
  • Remove apt role dependency

Bug Fixes

  • fix type in AcceptEnv

Other Changes

  • none

[v0.2.5] - 2015-01-23

New Features

  • none

Bug Fixes

  • Don't install openssh-sftp-server on Debian

Other Changes

  • none

[v0.2.0] - 2015-01-04

New Features

  • none

Bug Fixes

  • none

Other Changes

  • Add precise, move 14.04 to specific configuration
  • Feature/debian defaults
  • Minor typo fixes and add Archlinux support

[v0.1.0] - 2014-12-25

Initial Release